Office 365 Matrix

Below are the tactics and technique representing the MITRE ATT&CK Matrix™ for Enterprise covering cloud-based techniques. The Matrix contains information for the Office 365 platform.

Last Modified: 2019-10-09 18:48:31.906000

Initial Access	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection
Spearphishing Link	Account Manipulation	Valid Accounts	Application Access Token	Account Manipulation	Account Discovery	Application Access Token	Email Collection
Valid Accounts	Create Account		Redundant Access	Brute Force	Cloud Service Dashboard	Internal Spearphishing
	Office Application Startup		Valid Accounts	Steal Application Access Token	Cloud Service Discovery	Web Session Cookie
	Redundant Access		Web Session Cookie	Steal Web Session Cookie	Permission Groups Discovery
	Valid Accounts